Ourgame GLWorld 2.x hgs_startNotify() ActiveX Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Ourgame GLWorld 2.x hgsstartNotify ActiveX Buffer Overflow Exploit ===================================================================== 0day.today 2018-04-04...

Ourgame GLWorld 2.x - hgs_startNotify() ActiveX Buffer Overflow

Ourgame GLWorld 2.x - hgsstartNotify ActiveX Buffer Overflow milw0rm.com 2008-02-19...

Stack overflow

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

CVE-2008-0778

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

EUVD-2008-0788

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

CVE-2008-0778

Multiple stack-based buffer overflows exist in the QTPlugin.ocx ActiveX control of Apple QuickTime 7.4.1 and earlier. The vulnerability affects the QTPlugin.ocx component and is triggered by long arguments to the SetBgColor, SetHREF, SetMovieName, SetTarget, and SetMatrix methods, allowing remote...

Citrix Presentation Server Client WFICA.OCX ActiveX Heap BOF Exploit

No description provided by source. !-- Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit Vulnerability discovered by Andrew Christensen and Aaron Portnoy http://www.securityfocus.com/bid/21458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6334...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX BOF Exploit

No description provided by source. !-- ImageStation SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow Exploit Vulnerability discovered by Trancek written by e.b. Tested on Windows XP SP2fully patched English, IE6 Thanks to Trancek, h.d.m. and the Metasploit crew -- html head titleImageStation...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

No description provided by source. html headtitleBuffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging/title/head body Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 /br/br Description: This file belongs to...

联众世界GLWorld HanGamePluginCn18类ActiveX控件栈溢出漏洞

联众世界是在中国非常流行的在线游戏网站。 联众世界的游戏大厅主程序GLWorld所安装的HanGamePluginCn18.HanGamePluginCn18.1 ActiveX控件（HanGamePluginCn18.dll，CLSID：61F5C358-60FB-4A23-A312-D2B556620F20）在处理传送给hgsstartGame和hgsstartNotify方式的字符串参数时存在栈溢出漏洞。如果用户受骗访问了恶意网页并向这些方式传送了超长参数的话，就会触发这些溢出，导致执行任意代码。...

CVE-2008-0778: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long arguments to the 1 SetBgColor, 2 SetHREF, 3 SetMovieName, 4 SetTarget, and 5...

Buffer overflow

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...

CVE-2008-0748

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...

CVE-2008-0748

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...

CVE-2008-0748

The connected Nessus entry describes a concrete buffer overflow in Sony ImageStation’s AxRUploadServer.AxRUploadControl ActiveX (AxRUploadServer.dll) 1.0.0.38 used to upload photos. The vulnerability occurs when handling a long argument to the SetLogging method, allowing remote code execution if ...

citrix-overflow.txt

Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

Ask.com Toolbar AskJeevesToolBar.SettingsPlugin.1 ActiveX (askBar.dll) ShortFormat Property Arbitrary Code Execution

The AskJeevesToolBar.SettingsPlugin.1 ActiveX control, part of the Ask Toolbar, is installed on the remote host. It reportedly contains a buffer overflow that can be triggered with a long value for the 'ShortFormat' property. If a remote attacker can trick a user on the affected host into visitin...

Apple QuickTime ActiveX buffer overflow

Multiple buffer overflows in different methods and properties...

iMesh IMWeb.IMWebControl ActiveX (IMWeb.dll) SetHandler Method Arbitrary Code Execution

The IMWeb.IMWebControl.1 ActiveX control, included with the IMesh peer-to-peer file sharing application, is installed on the remote host. It reportedly allows arbitrary command execution through its 'SetHandler' method. If a remote attacker can trick a user on the affected host into visiting a...

Memory corruption

Unspecified vulnerability in an ActiveX control dxtmsft.dll in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."...